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rM THE CLAIMS 
Amended claims follow: 

1 . (Previously Amended) An apparatus for processing data packets, comprising: 
a first data processing unit adapted to filter incoming packets; 
an addressable memory unit in which a plurality of instruction sets for packet 

processing are stored; 

a second data processing unit adapted to process incoming packets accordmg to 
one of said plurality of instruction sets after the filtering, based on a thread assigned to 
the incoming packets by the first data processing unit; and 

a data bus connecting the addressable memory unit and the first and second data 

processing units. 

2 (Original) The apparatus of claim 1 , further comprising a policy condition table 
connected to said first data processing unit, said policy condition table having a plurality 
of rules stored therein. 

3 (Original) The apparatus of claim 1, further comprising a policy action table 
connected to said data bus and said addressable memory unit, wherein said policy action 
table stores at least one data processing policy. 



4. 



(Original) The apparatus of claim 3, wherein at least one of said policies 



comprises: 

t first address pointer element for identifying the location in said addressable 



a 



memory unit of one of said plurality of instruction sets, and 

a second address pointer element for identifying the location in said addressable 

memory unit of a state block. 
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5 (Original) The apparatus of Cain. 3, wherein said firs, data processing unit 
assigns a thread to each said incoming packet, wherein said thread corresponds to one 
said policies stored in said policy action table. 

6 (Original) The apparatus of claim 3, wherein said firs, dam processing unit 
comprises .ogic for matching a firs, incoming packet to a stored fl* rule and for 
generating a first thread If ft. firs, incoming packet matches said fins, rule, sa,d fin,, 
thread identifying the location of one of said a, l M s, one data processing pohc.es ,n sa.d 

policy action table. 

7 (Original) The apparatus of claim 6, wherein said second data processing unit is 
adapted to process the firs, incoming packet according to said data processing pohcy 
corresponding to said first thread. 

8 (Original) The apparatus of claim 6, wherein said data processing policy 
comprises a first address pointer to a starting address of a first set of instructions and a 
second address pointer to a starting address of a state block stored in said addressable 
memory unit, said state block used by said first set of instructions for processmg the first 
incoming packet. 

9. (Original) The apparatus of claim 6, wherein said thread is assigned to said first 
incoming packet based on said first rule. 

,0 (Original) The apparatus of claim 6, wherein said first processing unit further 
comprises logic for matching a second incoming packet to a stored second rule and for 
generating a second thread if the second incoming packet matches the second rule, sard 
second thread identifying the location of one of said at least one data processing pohcy m 

said policy action table. 



PACE 6/14 * RCVD AT 7*0/2004 5:47:36 PM pastern Daylight Time] * SVR:USPTO-EFXRF-1/7 * DNIS.87M306 * CSID:408 071 4660 * DURATION (mm-ss^OS-Oa 



_ „ CUTPr 408 971 4GS0 P-7 

Jul 29 04 01:55p SVIPG 



i- i«imlO wherein said second data processing unit is 

corresponding to said second thread. 

12 corigina^heapp^ofclaim 

said second incoming packe.based on said second rule. 

. A ^HiTheaoparatusofclaimS.wherctasaidflrstproccssinB 
13 . (Previous., Amended > m .PP* (o , ^ 

r^^^•------ ,a -* , •* ,, - ,, -''" 

.east one data processing policy in said policy action table. 

r~i.l™ 11 wherein the second data processing unit is 

adapted to process each packet according 
said thread associated with said packet. 

,s fOririniO The apparatus of claim 13, further comprising amemoryunit 

15. (Original; ^ d d proces sing unit, said 

processing unit. 

, , (Origina!) The apparatus of claim 1, wherein said second data processing unit 

16. (Original j i« vy ...cutinit instructions in parallel. 

comprises a plurality of general purpose processors for executing 

„ (OriginaDThe apparatus of claim ,6. wherein atleas, one said genera, purpose 
processor comprises a complex instruction se, computer processor. 

, 3 (Original, Tbe appals of claim 16, wherein a, leas, one said general purpose 
processor comprises a reduced instruction set computer processor. 
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19.-29. (Cancelled) 

30. (Piously Presented) An apparatus for processing data packets, 

^TTrTda* processing unit adapted to fi.ter incoming packets; 

jTddressalie mentor, unit in which a p.uralrty of instruct - ** 

acco rdi g, one of said plurality ofinsaucvion sets after the filtering, based on a 
. data bus connecting the addressable memory untt and the first 

uni, said policy condition table having a pluraUty of rules stored theretn 

wherein apolicy ac,ion«able is connected, said da, bus and satd . 

, • • „ nacket to a stored first rule and for generating a first thread if the 

T^Z "of one of said a, leas, one data processing policies in sard pohcy aeon 

" htoi wherein said second data processing uni, is adapted to process the firs, 
incoming pacRe, according to said data processing po,icy correspond,^ ,0 sa,d 

T " Sl ^lin said data processing policy comprises a firs, address pointer ,0 a 
slarti ng address of a ftrs, se, of ins— and a second address po.n,er to a 
TJl address of a state btocK stored in said addressable memory untt, satd 
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state block used by said first so, of instructions for processing the first incoming 

packet; . r . . „ 

wherein said first processing unit farther comprises logic for matching a 

second incoming packet to a stored second rule and for generating a second 

thread if the second incoming packet matches the second rule, said second 

thread identifying the location of one of said at least one data processing pohcy 

in said policy action table; 

wherein said second data processing unit is adapted to process the 
second incoming packet according to said data processing policy corresponding 

to said second thread; 

wherein a memory unit is connected to said first data processing unit and 
to said second data processing unit, said memory unit adapted to temporarily 
store packets before processing by said second data processing unit; 

wherein said second data processing unit comprises a plurality of general 
purpose processors for executing instructions in parallel; 

wherein the apparatus includes a control logic unit coupled to an input 
and the policy condition table for feeding an arithmetic logic unit, which is in 
turn coupled to the policy action table and the state block for generating an 
output. 
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